myrdyn reads your invoices, pays them from your USDC on Base, and stops when something looks off. You name who it’s allowed to pay. It is never told an address, so nothing it reads can send your money somewhere new.
Rent, a subscription, a contractor, your own savings. Name them once; after that the agent handles the invoice, the amount and the timing — inside the limits you set.
A payee it doesn’t know, an amount over your limit, a message that smells wrong: it stops and asks, with the reason attached. Refusing is a normal outcome, not an error.
Your keys stay inside Coinbase’s secure hardware and we never see them. What the agent gets is a delegation you grant from your phone — one account, one expiry date — and take back the same way.
Why it’s safe
An agent that is any use reads untrusted text all day — invoices, token names, transfer memos, web pages. Sooner or later one of them contains an instruction aimed at the agent instead of at you. Most agent wallets lose here.
In myrdyn that instruction is inert, and not because we filtered it. The agent works from names in your address book — landlord, savings — and is never told a single address. There is no way to say “send it to me” in the vocabulary it has.
You can test this yourself on day one: send your own wallet a transfer with a hostile memo and watch nothing happen.
Privacy
Prompts are encrypted on your device to a key the model’s own hardware publishes in its attestation. We relay ciphertext we cannot read. Your chat history lives on the phone — delete it and it is gone, for us too.
Not every model can do that. The picker groups models by what actually happens to your text, and it is not a cosmetic label: a model that ships your prompt to OpenAI or Google can still chat, but the wallet switches off while it is selected.
Receipts
A receipt ties together the enclave that produced the answer, the hashes of what was asked and answered, the intent it turned into, the rule that allowed it, and the transaction on Base.
Anyone can verify that chain without our servers and without seeing what you wrote. If a payment ever surprises you, the receipt tells you exactly which sentence and which rule produced it.
Open weights
Every model that can reach your wallet is open-weight and runs inside an enclave. There is no provider in the loop deciding which questions about your own money it would rather not answer — something mainstream assistants do constantly around tax, crypto, and anything that resembles advice.
The closed models are still one tap away, relayed without your identity attached. That is anon, not private: the provider sees the text but not who sent it, and their content rules still apply to what comes back. Because they do see the text, the wallet switches off while one is selected.
Setup
Face or fingerprint. No seed phrase to write down, photograph or lose.
An alias and an address, confirmed by you. The alias is all the agent ever sees.
Per payment, per week, and a date the delegation expires on its own. One account, one expiry, revocable from your phone at any moment.
Adding a payee later is the only way to widen what the agent can reach — and only you can do it, with your passkey, one at a time.
Questions
Not your wallet — the keys stay inside Coinbase’s secure hardware and we never hold them. But be exact about what you do hand over: a time-bound delegation on one account, granted from your phone. While it is active our backend can sign from that account. That is why it expires on a date you choose, covers only the account you point it at, and can be revoked from your phone in one tap — and why we suggest funding it with a week of bills rather than your savings.
It is allowed to be wrong. Wrong inside your limits costs you a payment you were going to make anyway, to someone you already named. Wrong outside them costs you nothing, because the enclave refuses before anything is signed.
Your conversation is. Your payments are not. Base is a public chain and every transfer stays there forever, linkable to your other activity. Private inference gives you private reasoning, not private money, and we are not going to pretend otherwise.
Your wallet lives in Coinbase Developer Platform Embedded Wallets, so it comes back as soon as you can authenticate again — there is no seed phrase to have lost. Your chat history does not come back: it only ever existed on that device.
USDC on Base today, to payees you have named. More assets and chains after that.
Self-custody in the sense that matters: the keys are yours, they live in hardware, and there is no seed phrase to be stolen. What you grant is closer to a revocable, time-limited power of attorney over one account. Coinbase still sees your transactions and addresses, and our relay sees the size and timing of your messages. The threat model lists all of it, including what we do not solve.
Not on the open-weight models. There is no provider in the loop to refuse and no content filter in the enclave — that is most of the reason to run open weights at all. On a closed model you get that company’s rules along with the answer, which is one more reason the wallet is off there.
That is genuinely how we would like you to start. Fund it with a week of bills, name two payees, and see whether it earns more.
We keep your email address and the date you sent it. Nothing else — no name, no tracker. Free while we are in beta.